Yes,it is a little XSS but in the real word it is not. If we are talking about XSS then I should use another server from where I start some injection or activities and make an attack on the other side...
So, I wish to use the same domain where the web mail are located.
Here is the real script how I log in:
<form action="https://cpanel2.eutelnet.rs:2096/login/" method="POST" target="_blank">
<b>Login</b>
<input type="text" name="user" size="16" >
<input type="password" name="pass" size="16" >
<input type="submit" value="Login" >
</form>
this is the same script like if I go to the web mail.
The modification should be in the line:
<input type="text" name="user" size="16" value="
[email protected]">
and
<input type="password" name="pass" size="16" value="password" >
I can make the script for collecting the user name and pass and to put together the stings of user name and "@yahoo.com" so I have a variable with "
[email protected]" but I should print out through php script the following code and start it automatically :
<form action="https://cpanel2.eutelnet.rs:2096/login/" method="POST">
<input type="text" name="user" size="16" value="
[email protected]">
<input type="password" name="pass" size="16" value="password" >
</form>
So, have somebody some idea ?